VYPR
← All advisories
Unrated severityNVD Advisory· Published Jun 14, 2007· Updated Jun 16, 2026

CVE-2007-3208

CVE-2007-3208

Description

CRLF injection vulnerability in Yet another Bulletin Board (YaBB) 2.1 allows remote attackers to obtain administrative access via requests to (1) register.pl or (2) profile.pl that write CRLF sequences to a .vars file. NOTE: this can be leveraged to execute arbitrary code.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Yabb/Yabb2 versions
    cpe:2.3:a:yabb:yabb:2.1:*:*:*:*:*:*:*+ 1 more
    • cpe:2.3:a:yabb:yabb:2.1:*:*:*:*:*:*:*
    • (no CPE)range: =2.1

Patches

Vulnerability mechanics

References

8

News mentions

0

No linked articles in our index yet.